Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa
File:                     3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          dR3ILR7Ogr/GG03P2rRFf/2YFBfuSGpnsG3xodaakr0=
Subject key identifier:   84:25:54:29:8E:9F:51:5B:E4:9E:5C:7A:17:C7:C9:C4:5F:90:17:C6
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       4D0DEB922DE574E4A00BAB1F53C573F372AEF887
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa
Signing time:             Tue 03 Jan 2023 02:07:01 +0000
ROA not before:           Tue 03 Jan 2023 02:02:01 +0000
ROA not after:            Tue 02 Jan 2024 02:07:01 +0000
asID:                     138995
IP address blocks:        103.208.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Mar 2023 08:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0d:eb:92:2d:e5:74:e4:a0:0b:ab:1f:53:c5:73:f3:72:ae:f8:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Jan  3 02:02:01 2023 GMT
            Not After : Jan  2 02:07:01 2024 GMT
        Subject: CN=842554298E9F515BE49E5C7A17C7C9C45F9017C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:2b:02:e2:3b:80:24:56:bd:90:d4:89:ed:
                    58:bd:91:8f:f9:1b:2f:3b:36:98:5a:12:4b:7c:57:
                    d3:6f:0f:f1:1f:5a:da:ca:e3:6b:17:cf:b5:a6:46:
                    30:cf:2d:3b:43:b2:f3:3d:21:3b:63:12:a4:d0:11:
                    10:b3:de:d4:82:a9:75:d1:32:22:32:7e:c3:fa:dd:
                    9a:fe:39:57:34:0f:07:33:c5:a9:e1:5a:26:8b:dc:
                    2d:82:57:f4:c1:ea:f6:46:17:3a:1b:9b:54:af:3d:
                    fc:79:ca:3e:c8:75:5d:c7:85:97:d7:d5:b1:3f:2b:
                    17:f0:d6:a2:17:b7:c9:7b:21:0a:30:2d:40:19:c6:
                    a9:66:3e:dc:d9:93:69:97:77:d7:4b:2b:30:aa:c9:
                    0e:33:bb:76:d9:c9:87:9e:2e:10:10:8e:27:9a:16:
                    45:cf:99:44:53:9b:8d:79:0f:95:11:88:db:e5:9d:
                    65:ea:e4:dd:39:e2:b0:5f:60:a8:32:08:65:d9:01:
                    66:fe:3c:3d:92:bb:14:cb:a5:4e:ca:f3:c4:8e:d5:
                    40:65:5c:45:cc:d3:0c:99:87:15:85:9e:f7:d5:30:
                    17:da:cd:1d:89:75:97:9e:ed:fd:ad:8c:c2:85:40:
                    05:41:a3:a1:a6:be:f5:f1:67:70:aa:cb:5c:cb:8a:
                    ef:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                84:25:54:29:8E:9F:51:5B:E4:9E:5C:7A:17:C7:C9:C4:5F:90:17:C6
            X509v3 Authority Key Identifier: 
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:29:47:4a:54:c2:fd:0f:7f:a1:32:9d:ce:4f:1d:93:34:cc:
         13:29:4b:e0:3d:d8:4a:3a:71:12:16:c6:98:9c:68:16:4c:0a:
         61:31:da:71:e5:34:d7:9d:2c:e6:6b:fe:7b:a7:ad:f2:4b:cb:
         ae:da:8d:10:d0:95:9a:7d:47:aa:6e:13:5e:e9:ba:05:53:84:
         8c:e6:3d:6b:69:ac:d6:56:09:0f:12:64:ea:8b:50:f9:56:a7:
         91:2c:28:4c:fd:86:0c:00:6a:df:09:aa:7e:c2:29:2a:19:a6:
         6c:bc:7a:8b:bb:f4:46:b8:f7:99:db:72:c3:aa:26:86:59:6e:
         06:44:86:2f:9f:3b:b9:2e:f3:40:0d:ce:47:0d:31:c4:09:75:
         b9:39:a7:ef:a0:0b:a8:3f:7d:7e:6c:62:8c:de:9e:91:6e:11:
         28:48:19:ae:24:fc:0e:4f:d9:ea:60:49:be:96:00:16:74:21:
         f1:5c:9b:5e:b0:1c:06:65:e8:b7:69:f2:37:74:3f:43:2a:62:
         e1:cf:82:55:33:53:0e:7e:87:09:ba:37:1b:e1:2e:5a:7a:6a:
         46:98:f0:7e:34:13:54:52:f1:f7:0f:45:3d:6c:d9:55:4e:df:
         fa:ea:7a:23:95:87:79:16:ee:fb:64:8c:3a:18:6b:2b:70:a7:
         75:34:ac:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:52:17 2023 by rpki-client on console-fra.rpki-client.org